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OBJECT TYPE: ROUTER 



HOST NAME: 



PORTS 



r 



201 



NOTE: 

THIS MODEL SHOWS I/O ACCESS LISTS 
FOR IP & IPX. THERE MAY BE ADDITIONAL 
ENTRIES AS INDICATED FOR ADDITIONAL 
PROTOCOLS. 



206 



PORT [1] 



/-202 



MEDIA TYPE: 



NUMBER: 



ENCAPSULATION: 



BANDWIDTH: 



DELAY: 



INACCLST IP: 



OUTACCLST IP: 



INACCLST IPX: 



OUTACCLST IPX: 



PORT ADDRESSES 



203< 




PORT [N] 



MEDIA TYPE: 



NUMBER: 



ENCAPSULATION: 



BANDWIDTH: 



DELAY: 



INACCLST IP: 



OUTACCLST IP: 



INACCLST IPX: 



OUTACCLST IPX: 



PORT ADDRESSES 



PORT_ADDR [1] 



PROTOCOL: 



ADDRESS: 



■212 



PORTADDR [N] 



PROTOCOL: 



ADDRESS: 



PORT.ADDR [1] 



PROTOCOL: 



ADDRESS: 



PROTOCOLS: 
I 



PROTOCOL [1] 



TYPE: 




NET_ADDR - 



PROTOCOL [N] 



TYPE: 



AD PR: [1] 




NET ADDR- 



if » ♦ 



ADDR: [11 



ADDR: [N] 




STATIC ROUTE [1] 



DEST ADDR: 



NEXT RTE ADDR: 



STATIC ROUTE [N] 



DEST ADDR: 



NEXT_RTE_ADDR: 
FIG.2A 
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ACCESS LIST [1] 






NUMBER: 






ELEMENTS • 












ELEMENT 


rm 






ACTION: 






ADDRESS: 






MASK: 










SRB_BRIDGE_GROUPS • 
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ACCESS LIST [N] 



NUMBER: 



ELEMENTS 



ELEMENT [N] 



ACTION: 



ADDRESS: 



MASK: 



ELEMENT [1] 



ACTION: 



ADDRESS: 



MASK: 



SRB_BRIDGE_GROUP[1] 




SRB_BRIDGE_GROUP[N] 


GROUP NUMBER: 




GROUP NUMBER: 


PEERS • 




PEERS • 




ENCAPSULATION TYPE: 



ADDRESS: 



RSRB_PEER [N] 



ENCAPSULATION TYPE: 



ADDRESS: 



RSRB_PEER [1] 



ENCAPSULATION TYPE: 



ADDRESS: 



FIG. 2B 
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OBJECT TYPE: SPT 



PROTOCOL: 



CONNS: 



/ OBJECT TYPE: CONN fNl 


/ OBJECT TYPE: CONN Ml 


SUBNET: 


OBJECT TYPE: CONN fOl 


SUBNET: 


POINTERS: 


SUBNET: 


POINTERS: 




POINTERS: 








/ POINTER 


POINTER 


RT.PO.PR 


RT,PO,PR 



/ POINTER 


POINTER 


RT.PO.PR 


RT,PO,PR 



/ POINTER 


POINTER 


RT.PO.PR 


RT.PO.PR 



FIG. 3 



NOTE: 

RT=ROUTER 

PO=PORT 

PR=PROTOCOL 
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C START ~") 



401 



INITIALIZE THE OUTPUT SPT P 
TO EMPTY 



402 



INITIALIZE PA TO THE FIRST PORT 
ADDRESS OF PROTOCOL P IN THE 
LIST OF ROUTERS 



EACH DISTINCT (SUB)NET 
IS ADDED TO THE SPT 
AS A "CONNECTION" 



405j_ 




YES 



404-} 



ADD SUBNETp(PA) 
TO SPTp 



ADD POINTER TO PA UNDER 
THE CONNECTION IN SPT MATCHING 
SUBNETp (PA) 



406-) 



SET PA=NEXT PORT 
ADDRESS OF TYPE PIN 
THE LIST OF ROUTERS 




FORALLSRO'SIN 
THE LIST OF 
ROUTERS 



NOTE- SUBNET FUNCTIONS ARE DETERMINED AS FOLLOWS: 
SUBNET| P ([A1 M1]) = [A1 & M1) M1] 

WHERE IS A BITWISE AND 
SUBNET| PX (NN)=NN 

WHERE NN = IPX SUBNET NUMBER 
SUBNET AppLETALK ([CBRLB CBRUB]) = [CBRLB CBRUB] 

WHER&CBRLB = CABLE RANGE LOWER BOUNDRY & CBRUB=CABLE 
RANGE UPPER BOUNDRY 

FIG. 4 ~~~~~ 
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ROUTED NETWORK (SERIAL LINK CORE & ETHERNET SUBNETS) 

1-> 502- 



10.30.0.0/9C 


ROUTER 


10.10.0.0/7A 


ROUTER 


10.20.0.0/.98 




(R1) 




' so- 7 


(R2) 


^-E0 



SUBNET 802.3 



503- 

SERIAL LINK (HDLC) 



SUBNET 802.3 



FIG. 5 



ROUTER R1: 



VERSION 10.0 



HOSTNAME R1 



NOVELL ROUTING 0000.OC08.94DD 



! 



INTERFACE ETHERNET0 
IPADDRESS 10.30.7.2 255.255.0.0 
IPX NETWORK 9C 



601 



! 

INTERFACE SERIALO 

IPADDRESS 10.10.4.1 255.255.0.0 

IPX NETWORK 7A 

BANDWIDTH 1000 
! 

ROUTER IGRP109 
NETWORK 10.0.0.0 



ROUTER R2: 



VERSION 10.0 
! 

HOSTNAME R2 

! 

NOVELL ROUTING 0000.0C04.3A3E 
! 

INTERFACE ETHERNET0 
IPADDRESS 10.20.5.2 255.255.0.0 
IPX NETWORK 98 
! 

iNTERFACE SERIALO 
IPADDRESS 10.10.4.2 255.255.0.0 
IPX NETWORK 7A 



ROUTER IGRP 109 

NETWORK 10.0.0.0 
! 

! STATIC ROUTE DEFINITION 

IP 70.70.3.0 255.255.0.0 199.37.28.3 



FIG. 6A 



FIG. 6B 
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OBJECT TYPE: ROUTER 



HOST NAME: R1 



PORTS 



PORT [1] : EO 



MEDIA TYPE: ETHERNET 



NUMBER: 0 



ENCAPSULATION: ARP 



BANDWIDTH: 1000 



DELAY: 100 



PORT ADDRESSES 



702 
703 



PORT [2] : SO 



MEDIATYPE: SERIAL 



NUMBER: 0 



ENCAPSULATION: HDLC 



BANDWIDTH: 1000 



DELAY: 2000 



PORT ADDRESSES 



PORTJkDDRPKRI.EO.lPI) 



PROTOCOL: IP 



ADDRESS: 10.30.7.2 255.255.0.0 



-705 



x 



701 
704 



PORT.ADDR [1] (R1,S0,IP1) 



PROTOCOL: IP 



ADDRESS: 10.10. 4.1 255.255.0.0 

— c 706 



PORTADDR[2](R1,S0,IPX1) 



PROTOCOL: IPX 



ADDRESS: 9C 



^707 



PORT_ADDR [2](R1,S0,IPX1) 



PROTOCOL: IPX 



ADDRESS: 7A 



C 708 




STATIC ROUTES: EMPTY 



ACCESS LISTS: EMPTY 



FIG. 7A 
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OBJECT TYPE: ROUTER 



HOSTNAME: R2 



PORTS 



PORT [1] : SO 



MEDIA TYPE: SERIAL 



NUMBER: 0 



ENCAPSULATION: HDLC 



BANDWIDTH: 1544 



DELAY: 2000 



PORT ADDRESSES 



PORT [2] : EO 



MEDIA TYPE: ETHERNET 



NUMBER: 0 



ENCAPSULATION: ARP 



BANDWIDTH: 10000 



DELAY: 100 



PORT ADDRESSES' 



PORT_ADDR [1] (R2.S0.IP1) 



PROTOCOL: IP 



ADDRESS: 10.10.4.2 255.255.0.0 



710-^ 



y-709 



X 



PORT_ADDR[1](R2,E0,IP1) 



PROTOCOL: IP 



ADDRESS: 10.20.5.2 255.255.0.0 



PORT_ADDR [2] (R2.S0.IPX1) 



PROTOCOL: IPX 



ADDRESS: 7A 



PORT_ADDR[2](R2,S0,IPX1) 



PROTOCOL: IPX 



ADDRESS: 98 




ACCESS LISTS: EMPTY 



FIG. 7B 
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OBJECT TYPE: SPT 



PROTOCOL: IP 



CONNS: [EMPTY] 



FIG. 8A 



OBJECT TYPE: SPT 



PROTOCOL: IP 



CONNS: 



fOBJECTlYre^QNgur 



SUBNET: 10.30.0.0 



POINTERS: [EMPTY] 
FIG. 8B 
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— i 



401-1 



402-1 



403-1 



2 



2 



2 



INITIALIZED SPT SET 
TO EMPTY 



PA ASSIGN ED 
10.30.7.2 255.255.0.0 



(SUBNET P (PA))= 10.30.0.0 
AND IS NOT IN SPT 



405-1 



2 



FIRST 'CONNECTION* 
(SUBNETp(PA)) ADDED 
TO SPT, p 



OBJECT TYPE: SPT 



PROTOCOL: IP 



CONNS: 



OBJECT TYPE: CONNIU 



SUBNET: 10.30.0.0 



POINTERS: 



! POINTER 



R1.E0.IP1 



v. 



v 



404-1 



2 



POINTER TO PA (R1.E0.IP1) 
ADDED UNDER SUBNET 
10.30.0.0 IN SPT| P 



FIG. 8C 
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OBJECT TYPE: SPT 



PROTOCOL: IP 



CONNS: 



[OBJECT TYPE: CONNfil" 



OBJECT TYPE: CONNM1 



SUBNET: 10.30.0.0 



POINTERS: 



SUBNET: 10.10.0.0 



POINTERS: 



POINTER 



R1.E0.IP1 



FIG. 8D 



407-1- 



406-1 



PA NOT LAST 
ADDRESS 



PAASSIGNED 
10.10.4.1 255.255.0.0 
403-2-) 



(SUBNET, P (PA))= 
10.10.0.0 AND IS 
NOT IN SPT IP 



405-22 



NEXT SUBNET 
ENCOUNTERED, NEW 
CONNECTION ADDED 
TO SPT 



OBJECT TYPE: SPT 



PROTOCOL: IP 



CONNS: 



OBJECT TYPE: CONNF21 



OBJECT TYPE: CONNH1 



SUBNET: 10.30.0.0 



POINTERS: 



SUBNET: 10.10.0.0 



POINTERS: 



T 



404-2 



I POINTER 



POINTER 



R1.E0.IP1 



SR1.S0.IP1 



1 



POINTER TO PA 
(R1.S0.IP1) ADDED 
UNDER SUBNET 
10.10.0.0 IN SPT| P 



FIG. 8E 
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407-2-, 



OBJECT TYPE: SPT 



PROTOCOL: IP 



CONNS: 



PA NOT LAST 
ADDRESS 




406-2- 
403-3- 



PAASSIGNED 
10.10.4.2 255.255.0.0 



OBJECT TYPE: CONNMI 



OBJECT TYPE: CONNE1 



SUBNET: 10.30.0.0 



POINTERS: 



SUBNET: 10.10.0.0 



POINTERS: 



POINTER 



R1.E0.IP1 



POINTER 



(SUBNET| P (PA)) = 
10.10.0.0 IS INSPT|p 



404-3-^ 



I POINTER | 



R1.S0.IP1 



R2.S0.IP1 i 



2 nd PORT ADDRESS 
POINTER FOR SUBNET 
10.10.0.0 
ADDED TO SPT 



407-3- 
406-3- 



PA NOT LAST 
ADDRESS 



FIG. 8F 



REASSIGNED 
10.20.5.2 
255.255.0.0 



403-4- 



405-3- 



(SUBNET,p(PA)) = 
10.20.0.0 IS NOT INSPT|p 




FINDING NEW SUBNET, 3 rd 
CONNECTION ADDED TO SPT 



OBJECT TYPE: CONNMI 



SUBNET: 10.30.0.0 



POINTERS: 



SUBNET: 10.10.0.0 



POINTERS: 



POINTER 
R1.E0.IP1 




I^ECfTYPErCQNiiraT 



SUBNET: 10.20.0.0 



POINTERS: 



FIG. 8G 
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OBJECT TYPE: SPT 




OBJECT TYPE: CONN[31 



OBJECT TYPE: CONNEl 



SUBNET: 10.20.0.0 



OBJECT TYPE: CONNJU 



SUBNET: 10.30.0.0 



POINTERS: 



POINTER 



R1.E0.IP1 



SUBNET: 10.10.0.0 



POINTERS: 



POINTERS: 




! POINTER 



SR2.E0.IP1 



FIG. 8H 



404-4 



1 



PORT ADDRESS FOR SUBNET 
10.20.0.0 ENCOUNTERED, 
POINTER ADDED TO SPT 



407-4 



1 



LAST PORT ADDRESS 
ENCOUNTERED: SPT FOR IP 
COMPLETE 




FIG. 81 
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FIG. 8J 
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901 



901A 



902 



c 



START 



INITIALIZE THE OUTPUT SPTp 
TO EMPTY 



I 



SET DUPLADDRSET TO EMPTY 



a 



INITIALIZE PA TO THE FIRST PORT 
ADDRESS OF THE FIRST ROUTER IN THE 
LIST FOR PROTOCOL P 



EACH DISTINCT 
(SUB)NET IS ADDED TO 
THE SPTASA 
"CONNECTION" 



905 -) 



ADD SUBNETp (PA) 
TO SPTp 




YES 



ADD POINTER TO PA UNDER 
THE CONNECTION IN SPT 
MATCHING SUBNETp (PA) 



906-) 



SET PA=NEXT PORT 
ADDRESS OF TYPE P 



FIG. 9A 




FORALLSRO'S 
IN THE LIST OF 
ROUTERS 
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NOTE 

AS REFERRED TO IN THIS FLOWCHART THE TERM "DUPLADDRSET 

CONNOTES A SET OF PORT ADDRESS SETS THAT CAPTURE THE 

PORT ADDRESSES THAT EXACTLY MATCH. 

FOR EXAMPLE { {PA1 , PA3, PA4} {PA9, PA7}} MEANS 

PA1, PA3, & PA4 ALL REFER TO THE EXACT SAME ADDRESS 

AND PA9 & PA7 REFER TO EXACTLY THE SAME ADDRESS 



903Cj 

ADDASET CONTAINING PA 
AND THE PORT ADDRESSES 

IN THE MATCHING SPT 
EXACTLY MATCHING PAAS 
ANEW ELEMENT OF 



DUPLADDRSET 




ADD PA TO THIS MATCHING 
MEMBER IN DUPLADDRSET 
(WHICH IS A SET OF PORT 
ADDRESS) 



(B> *— 

FIG. 9B 
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OBJECT TYPE: VIEW(VW) 

TYPE: CAMPUS 



GROUPS • 




FIG. 12 
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C 



START 



1301 ■) 



INITIALIZE VW TO EMPTY 
WITH TYPE=CAMPUS 



1305 



2 



1302 



SET CONN TO NEXT 
CONNECTION IN SPT C 



2 



SET CONN TO FIRST 
CONNECTION IN SPT p 




c 



YES 



EXIT 



1307 



2 



1306 



YES 



ADD TO THIS GROUP 
A POINTER TO CONN 
AND POINTERS TO ALL 
ROUTERS IN CONN 
NOT POINTED TO 
ALREADY 



YES 



IS 

THERE A 
'GROUP IN VW HAVING" 
ONE OR MORE ROUTERS 

IN COMMON WITH 
THOSE POINTED TO BY, 
CONN 

9 



1308 



NOTE: 

INPUT TO THIS PROCESS IS SPTp 

OUTPUT IS THE CAMPUS VIEW 
OBJECT (VW) 



CREATE A NEW GROUP AND 
NEW CAMPUS NUMBER AND 
ADD POINTER TO ALL 
ROUTERS IN CONN AND 
POINTER TO CONN 



FIG. 13 
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BORDER ROUTER 
AREAO AREA1 




FIG. 14 
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OBJECT TYPE: VIEW 

TYPE: OSPF 



GROUPS • 




FIG. 15 
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OBJECT TYPE: ROUTER 



HOSTNAME: R1 



PORTS 



PORffNf 



i 
I 



PROTOCOLS: 



PROTOCOL: 0SPF1 



TYPE: 



NET ADDR 



1 601-) q1601A 

H ADDR: 99.30.0.0 0.0.255.255 AREA 0 



1601B 



OBJECT TYPE: ROUTER 




HOSTNAME: R2 




PORTS • 




"~PORt~[N]" 

• 
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! 
i 

• 


PROTOCOLS: 






PROTOCOL: OSPF1 




TYPE: 




NETADDR « 


> 






I 


ADDR: 99.30.0.0 


0.0.255.255 AREA 0 



ADDR: 10.20.0.0 0.0.255.255 AREA 0 



ADDR: 20.20.0.0 0.0.255.255 AREA 0 



ADDR: 20.20.0.0 0.0.255.255 AREA 0 



OBJECT TYPE: ROUTER 




OBJECT TYPE: ROUTER 


HOSTNAME: R3 




HOSTNAME: R4 


PORTS • 




PORTS • 








"PORf[N]~ 


1 


. PORT [N] 


I 
i 
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! PROTOCOLS: 


PROTOCOLS: 










PROTOCOL: 


OSPF1 




PROTOCOL: 


OSPF1 


TYPE: 




TYPE: 


NET ADDR 


• 




NET ADDR 
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1602 


") 


I 



£ 



1602A 



NOTE: BORDER ROUTER 
WITH AREAS 0 & 1 



I ADDR: 98.40.0.0 0.0.255.255 AREA 1 | 

" 1602B-) 

IADDR: 20.20.0.0 0.0.255.255 AREA 0 h 1 



FIG. 16A 
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UPDATE MESSAGE WILL BE DELIVERED TO THE CONNECTION ASSOCIATED 
WITH PO IF IT IS NOT EMPTY; THE UPDATE MESSAGE WILL CONSIST OF 
{RT_EL L RT_EL= SEND(RT_EL_IN_TABLE, RP,<RO,PO> WHERE RT_EL_IN_TABLE 
IS A ROUTING TABLE ELEMENT IN RO'S ROUTING TABLE} 
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SEND OUT THE FOLLOWING UPDATE SET TO THE CONNECTION THAT POINTS 
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WHERE RT_EL_UPD BELONGS TO UPD_TO_PROC} 
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INTERFACE LOOPBACK 1 

IP ADDRESS 50.7.8.3 255.255.0.0 
i 

END 



VERSION 10.0 

! 

HOSTNAME ROUTER6 

! 

SOURCE-BRIDGE RING-GROUP 7 

SOURCE-BRIDGE 7 TCP 50.7.8.3 
! 

INTERFACE LOOPBACK 0 

IP ADDRESS 30.50.2.1 255.255.0.0 
i 

END 



FIG. 61A 



FIG. 61 B 



Title: Method of Resolving Conflicts in Access Control Lists. . . 
Inventor(s): R. N. Pelavin, et al. 

Express Mail Label No. EL652871260US; Docket No. 50325-0630 



99/104 



"routTr"riTIsTdsro] 



S RB_BRI DGE_GR0U PS • 




SRB_BRIDGE_GR0UP[1] 



GROUP NUMBER: 7 




RSRB_PEER [1] 

ENCAPSULATION TYPE: TCP 
ADDRESS: 30.50.2.1 



"W UTERR 6r[STDSRO] | 



SRB_BRIDGE_GROUPS • 




SRB_BRIDGE_GROUP[1] 



GROUP NUMBER: 7 




RSRB_PEER [1] 

ENCAPSULATION TYPE: TCP 
ADDRESS: 50.7.8.3 



FIG. 62 



Title: Method of Resolving Conflicts in Access Control Lists.. . 
Inventor(s): R. N. Pelavin, et al. 

Express Mail Label No. EL652871260US; Docket No. 50325-0630 



100/104 



NOTE: 

INPUT:: LIST OF SRO'S 
OUTPUT:: CONFLICT LIST 



c 



START 



6301 



2 



3 



INITIALIZE CONFLICTS TO EMPTY 



6302 



6305-) 



2 



SET R TO THE FIRST ROUTER 
THE LIST OF SRO'S 



SET R TO THE NEXT ROUTER 
IN THE LIST OF SRO'S 





6306-} 



YES 



6310-) 



SET P TO THE NEXT RSRB OR 
DLSW REMOTE PEER IN R 




SET P TO THE FIRST RSRB OR 
DLSW REMOTE PEER IN R 



6307 



NO 



6308 



2 



IS 

THE CPS 
FOR SOURCE R'S AND 
DESTINATION P'S 
DDRESS EMPTY, 

YES 



PUT <R,P> IN CONFLICTS 



FIG. 63 



Title: Method of Resolving Conflicts in Access Control Lists... 
Inventor(s): R. N. Pelavin, et al. 

Express Mail Label No. EL652871260US; Docket No. 50325-0630 



101/104 



NOTE: 
INPUT: LIST OFSRO'S 
OUTPUT: CONFLICT LIST 



c 



START 



INITIALIZE CONFLICTS TO EMPTY 



6402 



64052 



2 



SET R TO THE FIRST ROUTER IN 
THE LIST OF SRO'S 



SET R TO THE NEXT ROUTER 
IN THE LIST OFSRO'S 



6410 




6403- 



6406j_ 



DOES 
R HAVE A 
BGP PROCESS 

RUNNING 
? 



YES 



SET N TO THE NEXT NEIGHBOR 
STATEMENT IN THE BGP 



OBJEC" 



FORR 



SET N TO THE F 



RST NEIGHBOR 



STATEMENT IN THE BGP OBJECT 
FORR 



YES 



6409-^X IS 

N THE LASr 
NEIGHBOR 
STATEMENT OBJECT 
IN THE BGP OBJECT. 
FORR 
? 



6406kj^ 

YES^-^ N'S ADDRESS 
LOCAL 

? 

10 

6407 IS 

THE CPS 
NO /FOR SOURCE R'S AND" 
DESTINATION N'S REMOTE 
ADDRESS EMPTY 



6408j_ 



YES 



PUT<R,N>IN CONFLICTS 



FIG. 64 



Title: Method of Resolving Conflicts in Access Control Lists. . . 
Inventor(s): R. N. Pelavin, et al. 

Express Mail Label No. EL65287I260US; Docket No. 50325-0630 



102/104 




Title: Method of Resolving Conflicts in Access Control Lists... 
Inventor(s): R. N. Pelavin, et al. 

Express Mail Label No. EL652871260US; Docket No. 50325-0630 



103/104 



C 



START 





6601 -) 








SET ROUTING.LOOPS TO EMPTY 




6602-) , 








SET R TO THE F 


RST ROUTER IN 






THE LIST OF SRO'S 


SET R TO THE . NEXT ROUTER 








IN THE LIST OF SRO'S 




► 













NO 



6603 



6604 



IS 

R THE LAST 

ROUTER IN THE LIST 

OF SRO'S 
? 



NO 



YES 



6609 



1 



c 



EXIT 



6606-± 



ARE 
THERE ANY 
CONNECTIONS IN SPTp 
NOT DIRECTLY 

ATTACHED TO 
? 



YES 



SET C TO THE NEXT 
CONNECTION IN SPTp NOT 
DIRECTLY ATTACH ED TOR 



SET C TO THE FIRST 
CONNECTION IN SPTp NOT 
DIRECTLY ATTACHED TOR 



NO 



6608^/ IS 

C THE LAST 
CONNECTION 
IN SPTp NOT DIRECTLY 

v .ATTACHED TO 
? 



YES 



YES 



0 



FIG. 66 



NO. 



6611 -) 



6607 , ^ D0ES 

<C,R> "MATCH" ANY~ 
ELEMENT IN 

ROUTING. LOOPS. 
? 

NO 

6610- ^ DQES cps > 

WITH SOURCE 
RAND DESTINATION 
CONNECTION C PRODUCE A 
NON-EMPTY 
toUTINGLOOPS SET 
(RLPS) 
? 

YES 



FOR EACH PATH P IN RLPS, PUT 
<C,P> IN ROUTING LOOPS 



Title: Method of Resolving Conflicts in Access Control Lists. 
Inventor(s): R. N. Pelavin, et al. 

Express Mail Label No. EL652871260US; Docket No. 50325-0630 



104/104 




